CVE-2022-42863

ÉLEVÉE 8.8CVE-2022-42863 · Published 15/12/2022 · updated 17/06/2026

En bref

CVE-2022-42863 est une vulnérabilité ÉLEVÉE (CVSS 8.8) touchant safari (apple).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 1.2%, plus élevée que 69.1% des vulnérabilités.
Correctif : mettre à jour vers 16.2 ou plus récent.

Package	Affected versions	Patched versions
safari apple	`< 16.2`	`16.2`

Description

A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code execution.

References

seclists.org/fulldisclosure/2022/Dec/20 · Mailing List
seclists.org/fulldisclosure/2022/Dec/23 · Mailing List
seclists.org/fulldisclosure/2022/Dec/26 · Mailing List
seclists.org/fulldisclosure/2022/Dec/27 · Mailing List
seclists.org/fulldisclosure/2022/Dec/28 · Mailing List
openwall.com/lists/oss-security/2022/12/26/1 · Mailing List
security.gentoo.org/glsa/202305-32
support.apple.com/en-us/HT213530 · Release Notes
support.apple.com/en-us/HT213532 · Release Notes
support.apple.com/en-us/HT213535 · Release Notes
support.apple.com/en-us/HT213536 · Release Notes
support.apple.com/en-us/HT213537 · Release Notes

Autres vulnérabilités de safari

Tout voir →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

safari

apple

< 16.2

16.2

Autres vulnérabilités de safari

Tout voir →